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SMART CARD CHAINING IN PAY TELEVISION SYSTEMS 

5 

FIELD OF THE INVENTION 
The present invention relates to pay television systems generally and 
more particularly to systems for controlling access to pay television transmissions. 

BACKGROUND OF THE INVENTION 
in Many pay television systems today employ "smart cards" which are 

cards of the size of credit cards that include integrated circuits (IC). Typically, the 
smart cards are used to enable access to television transmissions. In such a case, a 
subscriber inserts a smart card in a slot in a cable television decoder to allow access 
to television transmissions. 
15 Usually, one smart card is associated with one television (TV) set and 

the subscriber receives one smart card upon payment of a subscription fee. The 
subscriber may also purchase, at a reduced price, additional smart cards for use with 
other TV sets in his house. 

In such a case, there is a possibility that the subscriber may try to 
20 purchase many cards, and sell most of them to other people at a price which is lower 
than the regular price, but higher than the price that the subscriber has paid for them. 
This may cause substantial losses to operators of television transmission systems. 

In a co-pending U.S. patent application to Doron Handelman et al., 
Sen No. 08/375,995 filed on January 20, 1995, entitled "Secure Access Systems", 
25 and assigned to the same assignee as the present application, as well as in 
corresponding European application 95115554.8 filed on October 2, 1995, there is 
described a parental control system which utilizes two smart cards that are inserted in 
a decoder. When one of the cards, which is a main card, is inserted in the decoder, 
access is enabled to non-restricted programs only. When both cards are inserted in 

1 
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the decoder, access is enabled to restricted programs as well as to non-restricted 
programs. 
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SUMMARY OF THE INVENTION 
The present invention seeks to provide systems and methods for 
controlling access to pay television transmissions at a site in which a plurality of pay 
television decoders are placed. 
5 There is thus provided in accordance with a preferred embodiment of 

the present invention a pay television system including: 
a pay television network; 

a subscriber unit which receives pay television transmissions via the 
pay television network and displays the pay television transmissions on televisions 
10 coupled thereto, the subscriber unit including at least two pay television decoders, 
wherein a first decoder includes a first card reader and a second decoder includes a 
second card reader; 

a first smart card which is operative, upon insertion in a first slot in the 
first card reader, to activate decoding of the pay television transmissions in the first 
15 decoder; and 

a second smart card which is operative, upon insertion in a second slot 
in the second card reader, to activate decoding of the pay television transmissions in 
the second decoder, wherein 

the second smart card is operable to deactivate in accordance with 
20 predetermined criteria, and to reactivate upon insertion in the first slot in the first card 
reader after removal of the first smart card from the first card reader. 

Preferably, the predetermined criteria include at least one of a 
predetermined time and a predetermined date. 

In accordance with a preferred embodiment of the present invention 
25 the predetermined criteria include a predetermined date, and the first smart card is 
operable to deactivate at a first deactivation date, the second smart card is operable to 
deactivate at a second deactivation date, and the first deactivation date is later than 
the second deactivation date. 
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Preferably, at least one of the first smart card and the second smart 
card is also operable to control access to a video-cassette-recorder for recording pay 

television transmissions. 

Further in accordance with a preferred embodiment of the present 
5 invention the second smart card receives, upon reactivation, a new deactivation date 
which is later than the second deactivation date. The new deactivation date is 
provided by one of the first decoder, the first smart card and a pay television headend. 

Preferably, the new deactivation date is provided by adding a time 
increment to a current system time, and calculation of the new deactivation date is 
10 performed at one of the first decoder, the first smart card, and the headend. 

In accordance with a preferred embodiment of the present invention 
reactivation of the second smart card includes transmission of chaining data, the 
chaining data including one of a signature, a key and a seed which is operable to at 
least one of validate, identify, verify and authenticate the second smart card. The 
15 chaining data also includes a digital representation of a time increment which is 
associated with a current system time to provide a deactivation date. 

In a preferred embodiment of the invention the one of a signature, a 
key and a seed is identical for the first smart card and for the second smart card. 

Further in accordance with a preferred embodiment of the present 
20 invention the predetermined criteria include a predetermined date, and the second 
smart card is operable to deactivate at any time of day during the predetermined date. 

In a preferred embodiment of the present invention the first smart card 
and the second smart card are interchangeable. 

There is also provided in accordance with a preferred embodiment of 
25 the present invention a pay television decoder including: 

a smart card reader including a smart card slot via which a first smart 

card is read; 

a decoder memory, coupled to the smart card reader, which is operable 
to store one of a signature, a key and a seed identifying the first smart card; and 
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a decoder processor, coupled to the decoder memory, which is 
operable to calculate a deactivation date based on data received from one of the first 
smart card, a pay television headend and the decoder memory, wherein 

the decoder processor is operable to provide the deactivation date to a 
5 second smart card, when the second smart card is inserted in the smart card slot and 
read via the smart card reader, in response to a match between the one of a signature, 
a key and a seed identifying the first smart card and a corresponding one of a 
signature, a key and a seed identifying the second smart card. 

In accordance with another preferred embodiment of the present 
10 invention there is provided a pay television decoder including: 

a smart card reader including a smart card slot via which a first smart 
card is read; and 

a decoder memory, coupled to the smart card reader, which is 

operable: 

15 to store a deactivation date of a second smart card, and one of a 

signature, a key and a seed identifying the first smart card, 

to provide the one of a signature, a key and a seed identifying 
the first smart card to the second smart card, when the second smart card is inserted 
in the smart card slot in the smart card reader, in response to a first instruction 
20 transmitted by the second smart card, and 

to provide the deactivation date to the second smart card in 
response to a second instruction transmitted by the second smart card. 

Preferably, the second instruction is transmitted in response to a match 
between the one of a signature, a key and a seed identifying the first smart card, and a 
25 corresponding one of a signature, a key and a seed identifying the second smart card. 

There is also provided in accordance with a preferred embodiment of 
the present invention a pay television access control method to be employed in a pay 
television system in which pay television programs are transmitted to a plurality of 
subscribers, each being entitled to receive selected programs, the method including: 

5 
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providing a first decoder activated by a first smart card to decode pay 
television transmissions, and a second decoder activated by a second smart card to 
decode pay television transmissions; 

deactivating the second smart card in accordance with predetermined 

5 criteria; 

removing the first smart card from a first card reader in the first 

decoder; and 

reactivating the second smart card by inserting the second smart card 
in the first card reader of the first decoder. 
10 Preferably, the predetermined criteria include at least one of a 

predetermined time and a predetermined date. 

Further in accordance with a preferred embodiment of the present 
invention the predetermined criteria include a predetermined date, and the method 
includes deactivating the first smart card at a first deactivation date, and deactivating 
15 the second smart card at a second deactivation date, wherein the first deactivation 
da te is later than the second deactivation date. 

Preferably, the method also includes supplying a new deactivation 
date to the second smart card upon reactivation. The supplying step includes adding a 
time increment to a current system time. 
20 There is also provided in accordance with a preferred embodiment of 

the present invention a pay television access control method including: 

providing, in a pay television decoder, a smart card reader including a 
smart card slot via which a first smart card is read, and a decoder memory, coupled to 
the smart card reader, which is operable to store one of a signature, a key and a seed 
25 identifying the first smart card; 

coupling, to the decoder memory, a decoder processor which is 
operable to calculate a deactivation date based on data received from one of the first 
smart card, a pay television headend and the decoder memory, 

inserting in the smart card slot in the smart card reader a second smart 

30 card; and 
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providing the deactivation date to the second smart card in response to 
a match between the one of a signature, a key and a seed identifying the first smart 
card and a corresponding one of a signature, a key and a seed identifying the second 
smart card. 

5 In accordance with another preferred embodiment of the present 

invention there is provided a pay television access control method including: 

providing, in a pay television decoder, a smart card reader including a 
smart card slot via which a first smart card is read, and a decoder memory coupled to 
the smart card reader; 

10 storing, in the decoder memory, a deactivation date of a second smart 

card, and one of a signature, a key and a seed identifying the first smart card; 

inserting the second smart card in the smart cprd slot in the smart card 

reader; 

supplying the one of a signature, a key and a seed identifying the first 
15 smart card to the second smart card in response to a first instruction transmitted by 
the second smart card; and 

transmitting the deactivation date to the second smart card in response 
to a second instruction generated by the second smart card. 

Further in accordance with another preferred embodiment of the 
20 present invention there is provided a pay television access control method including: 
providing a decoder including a decoder memory and a smart card 

reader, 

inserting a first smart card in the smart card reader; 
transferring, from the first smart card to the decoder memory, chaining 
25 data for activating a second smart card; 

removing the first smart card from the smart card reader; 
inserting the second smart card in the smart card reader, 
transmitting, from the decoder memory to the second smart card, the 
chaining data; and 

30 enabling the chaining data to activate the second smart card. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

The present invention will be understood and appreciated more fully 
from the following detailed description, taken in conjunction with the drawings in 
which: 

Fig. 1 is a generalized illustration of a portion of a pay television 
system installed at a subscriber residence and constructed and operative in 
accordance with a preferred embodiment of the present invention; and 

Figs. 2A and 2B together constitute a flowchart illustrating a preferred 
method of operation of the system of Fig. 1 in accordance with a preferred 
embodiment of the present invention. 
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DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS 



Reference is now made to Fig. 1, which is a generalized illustration of 
a portion of a pay television system constructed and operative in accordance with a 
5 preferred embodiment of the present invention. 

Throughout the specification and claims the term "pay television" is 
used in a broad sense to include one-way and two-way cable television as well as 
satellite television, CATV, and pay television generally. 

In the pay television system, pay television programs are transmitted to 
10 a plurality of subscriber units via a pay television network. Typically, some of the 
subscribers purchase more than one decoder to be installed in each room in a 
subscriber residence in which television sets are present. The decoders are operative 
to decode pay television transmissions and are each activated by a smart card. 

The term "decode" in all of its forms is used throughout the 
15 specification and claims in a broad sense to cover all forms of data decoding, ranging 
from simple descrambling or decoding to decryption. 

For the purposes of the present invention, the term "activate" in all of 
its forms, and taken in conjunction with a smart card, is used throughout the 
specification and claims to include enabling the smart card to perform access control 
20 functions which may include decoding, descrambling and decryption of information. 

The term "deactivate" in all of its forms, and taken in conjunction with 
the smart card, is used to include preventing the smart card from performing the 
access control functions. 

In a preferred embodiment of the present invention a subscriber unit 
25 includes a decoder 10 which is coupled to a television set 12, and a decoder 14 which 
is coupled to a television set 16. 

Decoder 10 and television 12 are preferably placed in a room A at a 
subscriber residence, and decoder 14 and television 16 are placed in a room B at the 
subscriber residence. Decoders 10 and 14 are each operative to receive pay television 
30 transmissions from the pay television network. 

9 
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Preferably, decoder 10 is activated by a smart card 18 which is inserted 
in a smart card slot 20 in decoder 10, and decoder 14 is activated by a smart card 22 
which is inserted in a smart card slot 24 in decoder 14. 

Each of smart cards 1 8 and 22 includes a processor (not shown) and a 
5 memory (not shown), as is well known in the art. Smart cards 18 and 22 employ 
information which is transmitted via the pay television network and received at the 
corresponding decoders 10 and 14 to generate a decoding or decryption key which is 
used to decode pay television transmissions. For that purpose, smart cards 18 and 22 
perform an algorithm which is processed by each of the smart card processors, as is 

10 well known in the art 

Smart cards 18 and 22 communicate with the corresponding decoders 
10 and 14 via smart card readers (not shown) which form part of decoders 10 and 14 
respectively. When inserted in the corresponding slots 20 and 24, smart cards 1 8 and 
22 are electrically connected to the respective smart card readers. 
15 Preferably, decoder 10 includes a decoder processor 26 and a decoder 

memory 28 which is coupled to decoder processor 26. Decoder 14 includes a decoder 
processor 30 and a decoder memory 32 which is coupled to decoder processor 30. 
The smart card readers (not shown) which form part of decoders 10 and 14 are 
respectively coupled to decoder processors 26 and 30. 
20 in a preferred embodiment of the present invention the smart card 

readers may provide information received at decoders 10 and 14 from the pay 
television network to smart cards 18 and 22, and may provide information read from 
smart cards 18 and 22 to decoders 10 and 14. 

The information communicated to and from smart cards 18 and 22 
25 may include data which is employed to generate the key, entitlements, clock data and 
messages such as invalidation of a card. 

If one of smart cards 18 and 22 becomes invalid, the key which is 
generated by the corresponding smart card processor does not decode the pay 
television transmissions, and access to the pay television transmissions is denied. 
30 Alternatively, any other appropriate means of preventing access to the pay television 
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transmissions may be employed such as, for example: the corresponding smart card 
processor may fail to generate a key; or the corresponding smart card processor may 
generate a key but may not communicate the generated key for further processing. 

Typically, the smart cards are purchased from a pay television vendor. 
- 5 When purchased, the vendor typically activates the cards by passing them through an 
activating machine (not shown) which applies an activation algorithm. In a preferred 
embodiment of the present invention the cards remain active until certain 
predetermined criteria occur which turn the cards invalid. 

Usually, purchasing a smart card is associated with a subscription to 
10 pay TV services When the subscriber purchases more than one smart card, he 
typically pays less for a second subscription than for a first subscription. 

Generally, a smart card is not uniquely associated with a specific 
decoder. Therefore, a valid smart card may activate any decoder of the type to which 
it fits. In such a case, there is a possibility that a subscriber may purchase several 
15 smart cards at a reduced price and sell them, at a price which is higher than the 
reduced price but still less than the full price, to other people. The system and method 
of the present invention may be employed to prevent such cases. 

Reference is now made to Figs. 2A and 2B which together form a 
flowchart illustration of a preferred method of operation of the system of Fig. 1 
20 in accordance with a preferred embodiment of the present invention a 

first smart card and a second smart card which are active, may be deactivated in 
accordance with predetermined criteria Preferably, the predetermined criteria may 
include a predetermined date and/or a predetermined time. However, other criteria 
may be employed, such as number of purchases of premium programs or amount of 
25 money spent on purchases. 

If the predetermined criteria include predetermined date criteria, the 
first smart card may include a predetermined first deactivation date and the second 
smart card may include a predetermined second deactivation date. Each of the 
deactivation dates may be stored in a memory zone in the corresponding smart card 
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by passing the smart cards through a machine (not shown), such as the activating 
machine mentioned with reference to Fig. 1. 

The machine, typically controlled by an algorithm in software, 
preferably bums data related to the deactivation dates into corresponding memory 
5 zones in the first and second smart cards. It is to be appreciated that the memories of 
the first and second smart cards may be of the EEPROM (Electronic Erasable 
Programmable Read Only Memory) type. 

In another preferred embodiment of the present invention the above 
mentioned deactivation dates may be communicated to the first smart card and to the 
10 second smart card via the pay television network. 

Preferably, the deactivation dates are maintained in terms of months or 
days. The first deactivation date and the second deactivation date may be different, 
and may be determined at time of purchase or at time of manufacture. 

Generally, television programs are decoded in a first decoder and in a 
15 second decoder to which the first and second smart cards are respectively coupled 
until the earliest of the above mentioned deactivation dates elapses. 

Assuming that the second deactivation date is earlier than the first 
deactivation date, the second smart card is the first to be deactivated. Deactivation of 
the second smart card preferably occurs when a current system date matches or 
20 exceeds the second deactivation date. The match may be found by comparison of the 
current system date to the deactivation date stored in the second smart card. Such 
comparison is typically performed in a processor which forms part of the second 
smart card as mentioned herein above with reference to Fig. 1. 

In another preferred embodiment of the present invention the processor 
25 which forms part of the second smart card may compare the current system date with 
a deactivation date which is received via the pay television network. 

If a match is found between the current system date and the second 
deactivation date, or if the current system date exceeds the second deactivation date, 
the second smart card preferably generates a message which is displayed on a TV to 
30 which the second decoder is coupled. The message typically indicates that the second 
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smart card is deactivated, and programming material is not decoded. It is to be 
appreciated that the first smart card remains active and programming material is 
decoded at the first decoder. 

To reactivate the second smart card, a subscriber preferably removes 

5 the first smart card from a first slot in a first card reader in the first decoder and 
replaces it by the second smart card. 

In a preferred embodiment of the present invention, the first smart card 
is operative, when inserted in the first slot, to transfer to the first decoder chaining 
data which is used to reactivate the second smart card, and the chaining data is 

10 transferred to the second smart card when the second smart card is inserted in the 
first slot. Alternatively, the first decoder may be programmed to include the data 
required for reactivation of the second smart card at entitlement time, which may be 
when the first decoder and the second decoder are purchased. Further alternatively, 
the first decoder may include a plurality of smart card slots, and the second smart 

15 card may be inserted in an unfilled slot while the first smart card is inserted in the 
first slot, the chaining data being transferred from the first card to the second card via 
the decoder. 

The chaining data may include a signature, a key or a seed which may 
be employed to at least one of validate, identify, verify and authenticate the second 
20 smart card. Preferably, the chaining data also includes a digital representation of a 
time increment which may be employed to calculate a deactivation date. The time 
increment is typically specified in months and days. 

The signature is checked and compared for validity in a decoder 
processor which forms part of the first decoder, such as decoder processor 26 of Fig. 
25 1. Alternatively, the processor which forms part of the second smart card may be 
operative to check validity of the signature received from the first decoder. 

If validity is found, i.e. the signatures of the first smart card and the 
second smart card coincide, the decoder processor of the first decoder adds the time 
increment to the current system date to generate a new deactivation date. Preferably, 
30 the new deactivation date is stored in another memory zone in the second smart card. 

13 
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Alternatively, the new deactivation date is communicated, via the pay television 
network, to a pay television headend (not shown), which may later use the new 
deactivation date to deactivate the second smart card when the new deactivation date 
elapses. 

5 It is to be appreciated that a processor which forms part of the first 

smart card, rather than the decoder processor of the first decoder, may be operative to 
calculate the new deactivation date of the second smart card. In such a case the 
processor which forms part of the first smart card and the processor which forms part 
of the second smart card may communicate, via the first card reader, with a decoder 
10 memory which forms part of the first decoder, such as decoder memory 28 of Fig. 1 
The decoder memory is preferably operable: 

to receive from the processor which forms part of the first smart 
card, and to store data including the new deactivation date of the second smart card, 
and one of a signature, a key and a seed identifying the first smart card; 
15 to provide the one of a signature, a key and a seed identifying 

the first smart card to the second smart card, when the second smart card is inserted 
in the first slot in the first decoder, in response to a first instruction transmitted by the 
second smart card; and 

to provide the new deactivation date to the second smart card in 
20 response to a second instruction transmitted by the second smart card. 

Preferably, the second smart card transmits the second instruction to 
the decoder memory only if the signatures of the first smart card and the second smart 
card coincide. The new deactivation date which is received from the decoder memory 
is stored in the second smart card. 
25 In another preferred embodiment of the present invention the new 

deactivation date is calculated in a headend processor which is located at the headend 
of the pay television system, and the headend rather than the first smart card provides 
the new deactivation date to the decoder memory. 

After the new deactivation date is stored in the second smart card, the 
30 decoder processor of the first decoder provides the second smart card an instruction 

14 



BNSDOC1D: <WO 973543QA1_I_> 



PCT/1L97/00031 

WO 97/35430 



which reactivates the second smart card. Alternatively, the decoder processor of the 
first decoder informs the headend that a new deactivation date is stored in the second 
smart card, and the headend transmits an instruction which reactivates the second 
smart card. 

- 5 After the second smart card is reactivated, it may be removed from the 

first slot in the first decoder and inserted in the second decoder. Since the second 
smart card is reactivated, the pay television programs are decoded. 

It is to be appreciated that various algorithms may be applied to 
calculate the new deactivation date. Such algorithms may include adding multiple 
10 time increments to the current system date, and adding a constant number of hours to 
the time increment to achieve deactivation at any selected time of a day. 

In a preferred embodiment of the present invention the time increment 
may be modified by the decoder processor of the first decoder or programmed by the 
manufacturer or the pay television vendor. Preferably, variable time increments may 
15 be stored in the decoder memory which may be controlled by the decoder processor 
of the first decoder. 

It is to be appreciated that the first and second smart cards are 
preferably linked together at entitlement time and thus the first smart card recognizes 
the signature of the second smart card and vice versa. If the chaining data is provided 
20 by a decoder rather than by a smart card, then the first and second decoders are 
preferably linked together at entitlement time, and the first and second smart cards 
receive the chaining data from the first and second decoders respectively when 
inserted in the respective decoders for the first time. 

The new deactivation date may be later than the deactivation date of 
25 the first smart card. In such a case, when the deactivation date of the first smart card 
elapses and the first smart card is deactivated, the second smart card may reactivate 
the first smart card. 

The above mentioned procedure is a chaining procedure which may be 
repeated many times, and for long periods. In such a procedure, each card may 
30 reactivate any number of cards which are linked thereto. It is to be appreciated that 
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reactivation of a card may take less than a second, or a few seconds if communication 
with the headend is required as described herein above. 

In a preferred embodiment of the present invention the two cards, i.e. 
the first smart card and the second smart card, are interchangeable, and the chaining 
5 procedure may initiate with the deactivation of the first smart card rather than the 
deactivation of the second smart card. It is to be appreciated that the first decoder and 
the second decoder are also interchangeable. 

In another preferred embodiment of the present invention, the first 
smart card may reactivate the second smart card twice, three times, or more before 
10 the first smart card is reactivated. The time increment may be calculated so that no 
two chained cards deactivate at the same time. If such a principle is maintained, an 
active card in the chained cards may always reactivate a deactivated chained card. 

The above mentioned chaining procedure gives the subscriber a very 
strong incentive to maintain both the first and second smart cards, and all cards 
15 chained to the first and second smart cards which he purchases from the vendor, in 
his residence in order to physically chain the cards at particular time periods. This 
makes it difficult, if not impossible, for the subscriber to sell one or more of the cards 

to another person. 

In a preferred embodiment of the present invention the first and second 
20 smart cards may be also employed to control access to a VCR (Video Cassette 
Recorder) to allow or prevent recording of television programs. In such a case, when 
one of the cards is deactivated, television programs are not decoded and the VCR 
may record only non-intelligible material. 

In another preferred embodiment of the present invention, the 
25 subscriber may postpone deactivation of a card whose deactivation date has elapsed 
for a period of a few hours by, for example, pressing a key (not shown) in a remote 
control (not shown) to prevent deactivation while he views a selected program. In 
such a case, the decoder processor of the first decoder, or the processor which forms 
part of the second smart card, may add a constant time increment, such as an hour, to 
30 the elapsed second deactivation date. 
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It is also to be appreciated that deactivation dates may be specified in 
hours, as well as in months and days, and deactivation may be selected to occur late 
at night or at other times of day at which television programs are not typically 
viewed. 

Preferably, the chaining data for reactivation of a card is not 
transferred before a deactivation time elapses. Thus, if the subscriber inserts the 
second smart card in the first slot before the second smart card is deactivated, no 
reactivation occurs. 

Typically, there is a time delay between manufacturing of cards and 
sale of the cards to a subscriber. Since deactivation dates may be pre-selected at 
manufacturing time, such time delay may result in deactivation of the cards before the 
cards are purchased. In such a case, when a card is purchased, a new deactivation 
date may be calculated based on the current system time, and different time 
increments may be applied to each card. 

It is appreciated that various features of the invention which are, for 
clarity, described in the contexts of separate embodiments may also be provided in 
combination in a single embodiment. Conversely, various features of the invention 
which are, for brevity, described in the context of a single embodiment may also be 
provided separately or in any suitable subcombination. 

It will be appreciated by persons skilled in the art that the present 
invention is not limited by what has been particularly shown and described 
hereinabove. Rather the scope of the present invention is defined only by the claims 
which follow: 
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CLAIMS 

What is claimed is: 

1 . A pay television system comprising: 

a pay television network; 
5 a subscriber unit which receives pay television transmissions via the 

pay television network and displays the pay television transmissions on televisions 
coupled thereto, the subscriber unit including at least two pay television decoders, 
wherein a first decoder includes a first card reader and a second decoder includes a 
second card reader; 

10 a fi^ smart card which is operative, upon insertion in a first slot in the 

first card reader, to activate decoding of the pay television transmissions in the first 
decoder, and 

a second smart card which is operative, upon insertion in a second slot 
in the second card reader, to activate decoding of the pay television transmissions in 

15 the second decoder, 

wherein said second smart card deactivates in accordance with 
predetermined criteria and reactivates upon insertion in said first slot in the first card 
reader after removal of said first smart card from the first card reader. 

20 2. A pay television system comprising: 

a pay television network; 

a subscriber unit which receives pay television transmissions via the 
pay television network and displays the pay television transmissions on televisions 
coupled thereto, the subscriber unit including at least two pay television decoders, 
25 wherein a first decoder includes a first card reader and at least one additional card 
reader, and a second decoder includes a second card reader; 

a first smart card which is operative, upon insertion in a first slot in the 
first card reader, to activate decoding of the pay television transmissions in the first 
decoder; and 
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a second smart card which is operative, upon insertion in a second slot 
in the second card reader, to activate decoding of the pay television transmissions in 
the second decoder, 

wherein said second smart card deactivates in accordance with 
5 predetermined criteria and reactivates upon insertion in an additional slot in the 
additional card reader. 

3 A system according to either claim 1 or claim 2 and wherein said 

predetermined criteria include at least one of a predetermined time and a 
10 predetermined date. 

4. A system according to either claim 1 or claim 2 and wherein said 
predetermined criteria include a predetermined date, and said first smart card 
deactivates at a first deactivation date, said second smart card deactivates at a second 

15 deactivation date, and said first deactivation date is later than said second 
deactivation date. 

5. A system according to either claim 1 or claim 2 and wherein at least 
one of said first smart card and said second smart card is also operable to control 

20 access to a video-cassette-recorder for recording pay television transmissions. 

6. A system according to claim 4 and wherein said second smart card 
receives, upon reactivation, a new deactivation date which is later than said second 
deactivation date. 



25 



7. A system according to claim 6 and wherein said new deactivation date 

is provided by one of said first decoder, said first smart card and a pay television 
headend. 
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g A system according to claim 7 and wherein said new deactivation date 

is provided by adding a time increment to a current system time, and calculation of 
said new deactivation date is performed at one of said first decoder, said first smart 
card, and the pay television headend. 

9 a system according to either claim 1 or claim 2 and wherein 

reactivation of said second smart card includes transmission of chaining data, said 
chaining data including one of a signature, a key and a seed which is employed to at 
least one of validate, identify, verify and authenticate said second smart card. 

10. A system according to claim 9 and wherein said chaining data also 

includes a digital representation of a time increment which is associated with a 
current system time to provide a deactivation date. 

15 1 1 A system according to claim 9 and wherein said one of a signature, a 

key and a seed is identical for the first smart card and for the second smart card. 

12. A system according to either claim 1 or claim 2 and wherein said 
predetermined criteria include a predetermined date, and said second smart card is 

20 deactivated at any time of day during said predetermined date. 

13. A system according to either claim 1 or claim 2 and wherein said first 
smart card and said second smart card are interchangeable. 

25 14. A pay television decoder comprising. 

a smart card reader including a smart card slot via which a first smart 

card is read; 

a decoder memory, coupled to said smart card reader, which is 
operable to store one of a signature, a key and a seed identifying said first smart card; 
30 and 
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a decoder processor, coupled to said decoder memory, which is 
operable to calculate a deactivation date based on data received from one of said first 
smart card, a pay television headend and said decoder memory, wherein 

said decoder processor is operable to provide said deactivation date to 
a second smart card, when said second smart card is inserted in said smart card slot 
and read via said smart card reader, in response to a match between said one of a 
signature, a key and a seed identifying said first smart card and a corresponding one 
of a signature, a key and a seed identifying said second smart card. 



10 15. A pay television decoder comprising: 

a smart card reader including a smart card slot via which a first smart 
card is read; and 

a decoder memory, coupled to said smart card reader, which is 

operable: 

!5 to store a deactivation date of a second smart card, and one of a 

signature, a key and a seed identifying said first smart card, 

to provide said one of a signature, a key and a seed identifying 
said first smart card to said second smart card, when said second smart card is 
inserted in said smart card slot in said smart card reader, in response to a first 
20 instruction transmitted by the second smart card, and 

to provide said deactivation date to said second smart card in 
response to a second instruction transmitted by the second smart card. 

16. A decoder according to claim 15 and wherein said second instruction 

25 is transmitted in response to a match between said one of a signature, a key and a 
seed identifying said first smart card, and a corresponding one of a signature, a key 
and a seed identifying said second smart card. 
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17. In a pay television system in which pay television programs are 

transmitted to a plurality of subscribers, each subscriber being entitled to receive 
selected programs, a pay television access control method comprising: 

providing a first decoder activated by a first smart card to decode pay 
5 television transmissions, and a second decoder activated by a second smart card to 
decode pay television transmissions; 

deactivating said second smart card in accordance with predetermined 

criteria; 

removing said first smart card from a first card reader in said first 

10 decoder; and 

reactivating said second smart card by inserting said second smart card 
in said first card reader of said first decoder. 

18. In a pay television system in which pay television programs are 

15 transmitted to a plurality of subscribers, each subscriber being entitled to receive 
selected programs, a pay television access control method comprising. 

providing a first decoder activated by a first smart card to decode pay 
television transmissions, and a second decoder activated by a second smart card to 
decode pay television transmissions, wherein the first decoder includes a first card 

20 reader and a second card reader, 

deactivating said second smart card in accordance with predetermined 

criteria; 

inserting said first smart card in said first card reader; and 
reactivating said second smart card by inserting said second smart card 
25 in said second card reader. 

19. A method according to either claim 17 or claim 18 and wherein said 

predetermined criteria include at least one of a predetermined time and a 
predetermined date. 



30 
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20. A method according to either claim 17 or claim 18 and wherein the 
predetermined criteria include a predetermined date, and the method comprises 
deactivating said first smart card at a first deactivation date, and deactivating said 
second smart card at a second deactivation date, wherein said first deactivation date 

5 is later than said second deactivation date. 

21. A method according to either claim 17 or claim 18 and comprising 
supplying a new deactivation date to said second smart card upon reactivation. 

10 22. A method according to claim 21 and wherein said supplying includes 

adding a time increment to a current system time. 



23. A pay television access control method comprising: 

providing, in a pay television decoder, a smart card reader including a 
15 smart card slot via which a first smart card is read, and a decoder memory, coupled to 
the smart card reader, which is operable to store one of a signature, a key and a seed 
identifying said first smart card; 

coupling, to said decoder memory, a decoder processor which is 
operable to calculate a deactivation date based on data received from one of said first 
20 smart card, a pay television headend and said decoder memory; 

inserting in said smart card slot in said smart card reader a second 
smart card; and 

providing said deactivation date to said second smart card in response 
to a match between said one of a signature, a key and a seed identifying said first 
25 smart card and a corresponding one of a signature, a key and a seed identifying said 
second smart card. 
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24. A pay television access control method comprising: 

providing, in a pay television decoder, a smart card reader including a 
smart card slot via which a first smart card is read, and a decoder memory coupled to 
said smart card reader; 
5 storing, in said decoder memory, a deactivation date of a second smart 

card, arid one of a signature, a key and a seed identifying said first smart card; 

inserting said second smart card in said smart card slot in said smart 

card reader, 

supplying said one of a signature, a key and a seed identifying said first 
10 smart card to said second smart card in response to a first instruction transmitted by 
the second smart card; and 

transmitting said deactivation date to said second smart card in 
response to a second instruction generated by the second smart card. 

15 25. A pay television access control method comprising: 

providing a decoder including a decoder memory and a smart card 



inserting a first smart card in said smart card reader; 

transferring, from said first smart card to said decoder memory, 
20 chaining data for activating a second smart card; 

removing said first smart card from said smart card reader; 

inserting said second smart card in said smart card reader; 

transmitting, from said decoder memory to said second smart card, 
said chaining data; and 
25 enabling said chaining data to activate said second smart card. 
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